Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
File: do0jVpP2hnxbOBPaHzb-EHvR14I.mft (raw, json)
Hash identifier: rSZMvf/gkQIVnK8/WXeQ5N1rUv16bYP9la4abCq09mY=
Subject key identifier: 52:F8:DF:DC:0A:59:79:DB:F3:42:74:5B:46:BC:5A:E4:E8:8E:55:5E
Authority key identifier: 76:8D:23:56:93:F6:86:7C:5B:38:13:DA:1F:36:FE:10:7B:D1:D7:82
Certificate issuer: /CN=768d235693f6867c5b3813da1f36fe107bd1d782
Certificate serial: 019EC1119E6AEA878AC39F657C4CD47B01BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
Manifest number: 1032
Signing time: Sat 13 Jun 2026 13:00:17 +0000
Manifest this update: Sat 13 Jun 2026 13:00:17 +0000
Manifest next update: Sun 14 Jun 2026 13:00:17 +0000
Files and hashes: 1: KuefoOzdZ9vrXjVoaWqLBNOd8Fc.roa (hash: Tr2+OxM2L2vZYYtrtzp3JmsEgxHYlAlF0KBqV8P0L1o=)
2: do0jVpP2hnxbOBPaHzb-EHvR14I.crl (hash: zYpED1jV5Qr/q6JJtSgvdnEIIIKyGkwel3khnvSJZyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:11:9e:6a:ea:87:8a:c3:9f:65:7c:4c:d4:7b:01:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=768d235693f6867c5b3813da1f36fe107bd1d782
Validity
Not Before: Jun 13 13:00:17 2026 GMT
Not After : Jun 14 13:00:17 2026 GMT
Subject: CN=52f8dfdc0a5979dbf342745b46bc5ae4e88e555e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:eb:92:2b:a7:f5:48:d6:20:4c:01:2f:74:bc:
e1:a9:8f:63:b2:33:d4:e8:a6:ee:22:00:2d:6f:98:
13:02:c9:3d:ca:06:b3:72:e5:bf:01:fd:c1:f3:59:
6d:a9:9c:46:86:27:a9:36:36:d7:3e:e9:2b:19:53:
9c:98:72:3c:58:1f:1a:ca:5a:74:04:cb:c7:a0:ec:
c0:ba:18:a0:d3:46:ed:d5:bb:35:cc:eb:26:30:cb:
5c:56:a5:8b:ef:96:f0:e3:3b:63:24:b8:25:ec:d0:
82:b7:ef:fb:90:6b:ff:eb:4c:89:43:42:2a:6a:ce:
0e:3a:47:0a:c3:2c:9f:58:1c:c5:56:bf:48:0c:5c:
bc:c4:cb:0e:41:e0:3b:8c:e1:9f:62:6a:77:99:a9:
13:a7:83:90:1e:05:82:76:50:d0:a7:f2:91:1f:d2:
62:18:52:a3:9d:ef:e1:46:f7:64:6f:1f:8f:e3:a2:
39:07:b6:13:9b:f6:07:df:92:a5:51:91:7f:fc:a3:
d6:32:5a:5e:3c:62:43:dd:d4:04:bb:f3:22:84:5b:
91:2a:f1:08:f1:9b:7b:5b:50:be:87:dd:6c:97:99:
e7:ef:20:69:cc:8d:f6:8d:7c:f8:9a:f7:e7:b8:b9:
b0:ba:b8:6c:37:c8:e7:e0:41:8c:08:5e:87:b2:cd:
f7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F8:DF:DC:0A:59:79:DB:F3:42:74:5B:46:BC:5A:E4:E8:8E:55:5E
X509v3 Authority Key Identifier:
keyid:76:8D:23:56:93:F6:86:7C:5B:38:13:DA:1F:36:FE:10:7B:D1:D7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:6f:eb:b5:16:9f:9d:a5:da:f8:2f:e5:36:fa:26:f0:7a:2e:
4a:d0:5b:50:8b:77:20:af:51:97:a9:4e:34:4e:98:b1:7c:f5:
5f:d0:c5:cc:14:e6:8c:2e:4e:0f:03:0e:92:24:3c:e8:67:c7:
76:34:18:78:d2:4f:c8:43:17:49:66:f3:8b:b3:69:e9:98:d6:
5f:df:76:c1:e0:82:91:da:7f:75:6f:b6:d9:be:09:fc:cb:5d:
b0:6f:7b:0c:76:02:5c:e3:49:2b:ab:78:2a:29:c5:87:53:d0:
e5:24:98:b3:1c:71:22:2a:3a:2b:4c:29:30:03:a2:db:b9:df:
fe:e4:04:25:45:76:e3:ed:4a:fd:7d:a5:ee:c7:15:5f:12:4a:
e7:63:1b:1c:7e:a5:80:f1:49:b3:8d:02:19:aa:c2:91:90:22:
8a:2b:06:84:d1:2b:1e:84:f0:87:0d:08:cb:f8:d4:f5:c3:e9:
2a:1d:ef:78:39:76:25:41:7d:83:85:11:73:ba:8b:33:a5:8a:
4c:0d:81:f5:29:a0:e7:c0:f4:cb:10:32:d4:5b:3c:71:05:3b:
c3:d1:48:c6:91:41:1f:a2:f7:87:8b:57:5c:98:ff:20:57:5e:
3c:2a:79:2c:b9:cb:f8:32:fa:81:3f:9d:06:e2:74:9a:e9:57:
57:7d:4c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:43:42 2026 by rpki-client